Surface UEFI offers new features, including faster startup and improved security. It replaces BIOS (basic input/output system). You can use Surface UEFI to manage the firmware features on your Surface.

Important

Under normal circumstances, there’s no need for you to change UEFI settings. If you change these settings, you risk the security and functionality of your Surface.

PC information

In the PC information section, you can see important information about your Surface, such as the universally unique identifier (UUID), serial number, and firmware version. You can use this information for troubleshooting or for working with warranty support.

Security

In the Security section, you can set or change your UEFI password, turn Secure Boot on or off, and change your TPM settings. Typically, only enterprises will need to change security settings—the default, out-of-the-box settings will be perfect for most users.

Note

UEFI passwords are used primarily by enterprises and IT professionals to limit the types of changes that employees can make to their devices. If you are part of an enterprise, contact your IT administrator if you have any questions or issues with your UEFI password. If you are not part of an enterprise and you choose to create a UEFI password, make sure to document your password in a safe place. You cannot reset your UEFI password, and Microsoft cannot retrieve it.

Devices

In the Devices section, you can turn on or off various connected devices and hardware on your Surface, such as the infrared (IR) camera, Bluetooth®, and on-board audio.

Note

If you turn off hardware in the Surface UEFI, you can’t turn it back on in Windows. You must turn it back on in the Surface UEFI.

Boot configuration

In the Boot configuration section, you can change how your Surface boots into Windows.

If your Surface is part of an enterprise, these settings may be locked or configured to your enterprise specifications. Contact your IT administrator for more information. If you are not part of an enterprise, the default, out-of-the-box settings should be perfect for you.

Note

If you accidentally delete Windows Boot Manager from your Master Boot Record, simply restart your Surface and Windows Boot Manager will reinstall automatically. If you delete Windows Boot Manager and your Surface is part of an enterprise, contact your IT administrator for support.

Date and time

In the Date and Time section, you can manually enter a new date and time.